config directory needs to be writable!

or at least you need to create some writable files in it:

domain-registry
admsn
secure.seed
derby.log
admch

all live in the "config" directory - despite the fact that they are dynamic files that need to be updated each time the server starts.

sweet.

if the developers of glassfish knew anything about SOX or enterprise deployment they might figure out that having writable config directories is NOT THAT GREAT.